Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mod ssl mod ssl vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0700
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl prior to 2.8.19 for Apache prior to 1.3.31 may allow remote malicious users to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are ha...
Mod Ssl Mod Ssl 2.4.10Mod Ssl Mod Ssl 2.4.2Mod Ssl Mod Ssl 2.4.9Mod Ssl Mod Ssl 2.5.0Mod Ssl Mod Ssl 2.6.6Mod Ssl Mod Ssl 2.7.0Mod Ssl Mod Ssl 2.8.14Mod Ssl Mod Ssl 2.8.15Mod Ssl Mod Ssl 2.8.5Mod Ssl Mod Ssl 2.8.5.1Mod Ssl Mod Ssl 2.4.0Mod Ssl Mod Ssl 2.4.1Mod Ssl Mod Ssl 2.4.7Mod Ssl Mod Ssl 2.4.8Mod Ssl Mod Ssl 2.6.4Mod Ssl Mod Ssl 2.6.5Mod Ssl Mod Ssl 2.8.10Mod Ssl Mod Ssl 2.8.12Mod Ssl Mod Ssl 2.8.3Mod Ssl Mod Ssl 2.8.4Mod Ssl Mod Ssl 2.4.3Mod Ssl Mod Ssl 2.4.4
NA
CVE-2002-0082
The dbm and shm session cache code in mod_ssl prior to 2.8.7-1.3.23, and Apache-SSL prior to 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote malicious users to use a buffer overflow to execute arbitrary code via a large cli...
Apache-ssl Apache-ssl 1.45Apache-ssl Apache-ssl 1.46Mod Ssl Mod Ssl 2.8.5Mod Ssl Mod Ssl 2.8.6Apache-ssl Apache-ssl 1.42Apache-ssl Apache-ssl 1.44Mod Ssl Mod Ssl 2.8.3Mod Ssl Mod Ssl 2.8.4Mod Ssl Mod Ssl 2.7.1Mod Ssl Mod Ssl 2.8Apache-ssl Apache-ssl 1.40Apache-ssl Apache-ssl 1.41Mod Ssl Mod Ssl 2.8.1Mod Ssl Mod Ssl 2.8.2
NA
CVE-2002-1157
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and previous versions, when UseCanonicalName is off and wildcard DNS is enabled, allows remote malicious users to execute script as other web site visitors, via the server name in an HTTPS response on the SSL p...
Mod Ssl Mod Ssl
7.8
CVSSv3
CVE-2002-0653
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and previous versions, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.
Modssl Mod Ssl
NA
CVE-2015-2091
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and previous versions does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote malicious users to spoof clients via a crafted certificate.
Apache Mod-gnutls
NA
CVE-2005-2700
ssl_engine_kernel.c in mod_ssl prior to 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote malicious users to bypass intende...
Apache Http ServerDebian Debian Linux 3.1Debian Debian Linux 3.0Canonical Ubuntu Linux 4.10Canonical Ubuntu Linux 5.04
NA
CVE-2005-2728
The byte-range filter in Apache 2.0 prior to 2.0.54 allows remote malicious users to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
Apache Http Server 2.0.42Apache Http Server 2.0.47Apache Http Server 2.0.50Apache Http Server 2.0.35Apache Http Server 2.0.37Apache Http Server 2.0.44Apache Http Server 2.0.39Apache Http Server 2.0.52Apache Http Server 2.0.53Apache Http Server 2.0.51Apache Http Server 2.0.28Apache Http Server 2.0.41Apache Http Server 2.0.49Apache Http Server 2.0.9Apache Http Server 2.0.32Apache Http Server 2.0.38Apache Http Server 2.0.48Apache Http Server 2.0.45Apache Http Server 2.0.40Apache Http Server 2.0.36Apache Http Server 2.0.46Apache Http Server 2.0.43
NA
CVE-2004-0488
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote malicious users to execute arbitrary code via a client certificate with a long subject DN.
Apache Http ServerDebian Debian Linux 3.0Redhat Enterprise Linux Server 2.0Redhat Enterprise Linux Workstation 2.0
NA
CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and previous versions, OpenSSL prior to 0.9.8l, GnuTLS 2.8.5 and previous versions, Mozilla Network Security Ser...
Openssl Openssl 1.0Apache Http ServerOpenssl OpensslGnu GnutlsMozilla NssDebian Debian Linux 5.0Canonical Ubuntu Linux 10.10Fedoraproject Fedora 11Fedoraproject Fedora 13Debian Debian Linux 4.0Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 9.04Debian Debian Linux 6.0Fedoraproject Fedora 12Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 9.10Fedoraproject Fedora 14F5 Nginx
NA
CVE-2012-4661
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 prior to 8.3(2.34), 8.4 prior to 8.4(4.4), 8.5 prior to 8.5(1....
Cisco Adaptive Security Appliance Software 8.3\\(1\\)Cisco Adaptive Security Appliance Software 8.3\\(2\\)Cisco Adaptive Security Appliance Software 8.4Cisco Adaptive Security Appliance Software 8.4\\(1\\)Cisco Adaptive Security Appliance Software 8.4\\(1.11\\)Cisco Adaptive Security Appliance Software 8.4\\(2\\)Cisco Adaptive Security Appliance Software 8.4\\(2.11\\)Cisco Adaptive Security Appliance Software 8.5Cisco Adaptive Security Appliance Software 8.5\\(1\\)Cisco Adaptive Security Appliance Software 8.5\\(1.4\\)Cisco Adaptive Security Appliance Software 8.6Cisco Adaptive Security Appliance Software 8.6\\(1\\)Cisco 5500 Series Adaptive Security ApplianceCisco 7600 RouterCisco Catalyst 6500Cisco Catalyst 6503-e -Cisco Catalyst 6504-e -Cisco Catalyst 6506-e -Cisco Catalyst 6509-e -Cisco Catalyst 6509-neb-a -Cisco Catalyst 6509-v-e -Cisco Catalyst 6513 -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook